Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-53309

drm/radeon: Fix integer overflow in radeon_cs_parser_init

Description

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeon_cs_parser_init The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 28a326c592e3e444c59f28b3e60c3b07692928d6 to < d05ba46134d07e889de7d23cf8503574a22ede09affected
  • 28a326c592e3e444c59f28b3e60c3b07692928d6 to < cfa9148bafb2d3292b65de1bac79dcca65be2643affected
  • 28a326c592e3e444c59f28b3e60c3b07692928d6 to < b8fab6aebdf2115ec2d7bd2f3498d5b911ff351eaffected
  • 28a326c592e3e444c59f28b3e60c3b07692928d6 to < e6825b30d37fe89ceb87f926d33d4fad321a331eaffected
  • 28a326c592e3e444c59f28b3e60c3b07692928d6 to < c0d7dbc6b7a61a56028118c00af2c8319d44a682affected
  • 28a326c592e3e444c59f28b3e60c3b07692928d6 to < 2e1be420b86980c25a75325e90dfc3fc73126f61affected
  • 28a326c592e3e444c59f28b3e60c3b07692928d6 to < 25e634d7f44eb13113139040e5366bebe48c882faffected
  • 28a326c592e3e444c59f28b3e60c3b07692928d6 to < f828b681d0cd566f86351c0b913e6cb6ed8c7b9caffected

Linux Linux

Default version status: affected

  • 3.13affected
  • 0 to < 3.13unaffected
  • 4.14.324 to ≤ 4.14.*unaffected
  • 4.19.293 to ≤ 4.19.*unaffected
  • 5.4.255 to ≤ 5.4.*unaffected
  • 5.10.192 to ≤ 5.10.*unaffected
  • 5.15.123 to ≤ 5.15.*unaffected
  • 6.1.42 to ≤ 6.1.*unaffected
  • 6.4.7 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References